Firebase AppCheck Quotas & Limits

Question

From firebase documentary https://firebase.google.com/docs/app-check

Your use of App Check is subject to the quotas and limits of the attestation providers you use. DeviceCheck access is subject to any quotas or limitations set by Apple. SafetyNet has a daily quota of 10,000 calls...

My question is: what does it mean by saying "10,000 calls per day"? is it's 10.000 API calls to firebase service, example: call Cloud functions 10.000 times? if it's true then this will limit the mumber of users using our app.

Solution

It means your application can make 10,000 calls per day to SafetyNet when clients interact with backend resources. You can fill out a form requesting to increase that limit - 10,000 is just the baseline. You should take a look at the documentation as suggested by Firebase.

Clients will send an App Check token with each request made to Firebase, and Firebase will validate the token before allowing access to resources when App Check is enforced/enabled in the console. The understanding is that this would be something similar to a JWT, so it is valid for some amount of time for any one app instance (or user).

Comments

[bigbang489]

That mean our App/User send request to Safetynet to get JWT and as long as the token is not expired, we can attach the token in every requests to Firebase? If it's true, how long that token can be used before expired?

[j1mbl3s]

@bigbang489 I'm not sure, you can try creating a token and checking the expiration time against the time it was obtained.